Skip to content

Commit

Permalink
Add process_mrelease to allowed system calls
Browse files Browse the repository at this point in the history
required since 2e00404

Without this, earlyoom seems to work but actually is killed with signal
SIGSYS whenever an OOM situation occurs. It is immediately restarted by
systemd, which is why this problem might go unnoticed.
  • Loading branch information
zickgraf authored and rfjakob committed Apr 23, 2024
1 parent e6c7978 commit c171b72
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion earlyoom.service.in
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ IPAddressDeny=any
RestrictAddressFamilies=AF_UNIX

SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=@system-service process_mrelease
SystemCallFilter=~@resources @privileged

[Install]
Expand Down

0 comments on commit c171b72

Please sign in to comment.